Whatever your needs,
Our plans have you
Covered

Essential

Automated application security testing for teams that need to find vulnerabilities fast and meet compliance requirements.

Starting from

$500/month

Includes one application license

Features:
1 Applicative License
2 Scan+ Tokens per month
Authenticated and API scanning
Real-time monitoring and discovery
Rapid response to emerging threats
PDF and CSV reporting
Google and GitHub SSO

Pro

Complete vulnerability and attack surface management across applications, infrastructure, endpoints, and cloud.

Starting from

$1,500/month

Includes two infrastructure licenses

Features:
2 Infrastructure Licenses
Free Scan+ deep scan on primary domain with each infrastructure scan
Free Scan+ attack surface scan on primary domain with each infrastructure scan
5 Endpoint Monitoring Licenses
1 Cloud License
1 Applicative License
5 Scan+ Tokens per month
PDF and CSV reporting
Role-based access control
Microsoft, Google, and GitHub SSO

Enterprise

Continuous attack surface monitoring built around your organization, deployed at any scale with white-glove support.

Contact sales

Custom

Tailored to your needs

Everything in Pro+
Custom volume and licensing
Dedicated onboarding
SLA and priority support
Tailored to your environment
Zero-day discovery research program
Dedicated scanner infrastructure
Advanced dashboard and reporting
Executive reports (SOC 2, PCI, HIPAA)

On-demand

A pay-as-you-go credit wallet available even without a plan — layer deep scans, one-time assessments and Scan+ tokens with or without any subscription.

Flexible pricing

Credit-based

1 credit = $1 CAD

No active plan required

Available even without a plan
Pay only for what you use
Credits never expire
Transferable between accounts
One-time scans at a reduced rate
Scan+ tokens purchasable with credits
On-demand infrastructure, applicative and cloud scans
Works even without an active plan
Top up from the dashboard anytime

Vullify Zero Day Research provides 24/7 updates into new and emergent vulnerabilities so you always have full situational awareness.

Want more?
We have bolt-ons.

Add any of these services to your plan

Expert findings review
Expert findings review

Our security analysts review each scan result, validate it against your environment, and surface the findings that matter most — so your team moves straight to remediation.

Bug hunting
Bug hunting

Our CREST-certified experts layer offensive testing on top of your continuous scans, adding human depth for chained exploits and business-logic risks.

Security that scales with your organization

When the standard plans aren't enough, Enterprise adapts Vullify to fit your environment — custom volume and licensing, a dedicated onboarding process, priority support, and an SLA built around your operational requirements.

Electronic circuit

For complex environments

Meet the
Enterprise plan

Get everything in Pro, plus custom volume and licensing, dedicated onboarding, priority support, and an SLA tailored to your environment. We'll partner with you to deploy Vullify at any scale.

Jump to:

What each license can do

Select a license to explore its capabilities

One license, two scanning modes

Included with every Infrastructure license

Cybersecurity Asset Management (CSAM)

Continuous inventory and tracking of all your discovered assets

2× Scan+ on your primary domain

Two included automatic Scan+ scans for deep web scans and attack surface mapping

External Infrastructure

Full attack surface discovery across all your exposed assets — vulnerabilities, CVEs, shadow IT, ports, technologies, and misconfigurations.

Internal Infrastructure

Agent-based scanning from inside your network to find vulnerabilities, missing patches, and misconfigurations invisible from outside.

Scan+ tokens explained

Scan+ tokens are consumed credits for resource-intensive operations. Each plan includes a monthly allocation. Unused tokens accumulate and carry over to the next month as long as the plan remains active.

Deep external scan

A deeper vulnerability scan of a single domain or subdomain, surfacing CVEs and misconfigurations that normal scans don't catch.

Cost: 1 token

Attack surface discovery

Discovers your full external attack surface from one seed domain — shadow IT, exposed services, affiliates, and OSINT.

Cost: 1 token

Credentials leak scan

Searches dark web forums, breach databases, and paste sites for leaked passwords, API keys, and session tokens tied to your corporate domains.

Cost: 5 tokens

Add-on licenses

Scale your plan at your pace. Add-on prices are in CAD and stack on top of your base plan.

Essential subscribers

Add-onUnitPrice (CAD)
Additional Applicativeper license+$150/mo

Pro subscribers

Add-onUnitPrice (CAD)
Additional Applicativeper license+$150/mo
Additional Infrastructureper license+$200/mo
Additional Monitoringper license+$40/mo
Additional Cloudper license+$150/mo
Additional Scan+ Tokenper token+$50/mo

Infrastructure asset pricing

How Infrastructure licenses handle assets beyond the included allowance.

Base license

  • 100 assets per scan included per license
  • Each license is independent — no pooling between licenses

Extra assets (pre-provisioned)

  • Added in increments of 25 assets per scan
  • Each increment applies to all licenses simultaneously
  • $2.00 CAD / month per additional asset, per license

Overage

  • $5.00 CAD per asset, one-time charge per billing cycle
  • Evaluated per license and per scan independently

Pay-as-you-go credits

Available even without a plan

1 credit = $1 CAD. Credits are a digital wallet usable for any purchase in the dashboard — licenses, Scan+ tokens or one-time scans. Scan+ tokens are not granted automatically; they are purchased separately with credits. One-time scans are available at a reduced rate with no monthly commitment. Credits never expire, even without an active plan, and are transferable between accounts.

Credits never expire.

One-time scans

Run a single scan on demand using credits — no monthly commitment required.

One-time scanCredits requiredCAD equivalent
Applicative Scan (1 target) 75 credits$75
Infrastructure Scan (1 target) Does not include the free Scan+ deep scan and attack surface scan bonus from the Pro license100 credits$100
Cloud Scan (1 target) 75 credits$75
Scan+ Token 50 credits$50

Infrastructure asset pricing — with credits

How Infrastructure scans handle assets when you pay with credits.

Base (one-time scan)

  • 100 assets included per one-time infrastructure scan
  • Each scan is independent — no pooling across scans or accounts

Extra assets (pre-provisioned)

  • Added in increments of 25 assets per scan
  • 2 credits per additional asset, deducted at scan time

Overage

  • 5 credits per additional asset ($5 CAD equivalent)
  • Overage creates an amount due on your account — no automatic billing cycle
  • Further scans are blocked until the customer pays the amount due

Compare Plans

Choose the plan that best fits your security needs

Essential

For small teams

Pro

For growing businesses

Enterprise

For large organizations

Scanning & Discovery

Applicative License
1 license
1 license
Custom volume
Infrastructure License
2 licenses
Custom volume
+Cybersecurity Asset Management (CSAM) included
+Free Scan+ deep scan on primary domain with each infrastructure scan
+Free Scan+ attack surface scan on primary domain with each infrastructure scan
Endpoint Monitoring License
5 licenses
Custom volume
Cloud License
1 license
Custom volume
Credentials Leaks Monitoring
Scan+ Tokens
2 per month
5 per month
Custom
Pay-as-you-go credits

Vulnerability Management

Real-time monitoring and discovery
Rapid response
Asset monitoring
Log monitoring and response

Reporting

PDF Reporting
CSV Reporting

Access & Roles

Role-based access control
Advanced access control

SSO Integrations

Google SSO
GitHub SSO
Microsoft SSO

Enterprise & Support

Custom volume & licensing
Zero-day discovery research program
Dedicated scanner infrastructure

Prices are in Canadian dollars (CAD) and exclude applicable taxes. Enterprise pricing is customized based on volume, scope, and client requirements.

Have more questions?

Not sure which plan fits your team, or need something tailored? Book a 30-minute call with us and we'll walk you through it.